ISA/IEC 62443 PROGRAM
IC34IACS Cybersecurity Design & Implementation
Version 3.02
Design, implement, and test cybersecurity countermeasures to achieve target security levels.
From requirements to
secure implementation.
Industrial Automation Control System (IACS) Cybersecurity Design & Implementation focuses on designing and implementing cybersecurity countermeasures for new or existing IACS to achieve the target security level assigned to each zone or conduit.
The second phase of the IACS Cybersecurity Lifecycle, defined in ISA/IEC-62443-1-1, involves selecting appropriate countermeasures based on their security-level capability and the threats and vulnerabilities identified during assessment.
Cybersecurity acceptance testing of the integrated solution validates that countermeasures are correctly implemented, that the IACS has achieved the target security level, and that the objectives in the cybersecurity requirements specification (CRS) have been satisfied.
Course at a glance
Duration: 3 days
Credits: 2.1 CEUs
Version: 3.02
Materials: English
Exam: English
Focus: Design, implementation, and acceptance testing
Mandatory prerequisites
Successful completion of any version of IC32: Using ISA/IEC-62443 Standards to Secure Your Control Systems and passing the ISA/IEC-62443 Cybersecurity Fundamentals Specialist certificate exam are mandatory prerequisites for this course.
Recommended preparation
IC33: Assessing the Cybersecurity of New or Existing IACS Systems, or equivalent knowledge and experience, is recommended.
Learning objectives
- Interpret the results of an industrial control system (ICS) cybersecurity risk assessment
- Develop a cybersecurity requirements specification (CRS)
- Develop a conceptual design based on information in a well-crafted CRS
- Explain the security development lifecycle process and deliverables
- Perform basic firewall configuration and commissioning
- Design a secure remote access solution
- Develop a system hardening specification
- Implement a basic network intrusion detection system (IDS)
- Develop a cybersecurity acceptance test plan
- Cybersecurity factory acceptance test (CFAT)
- Cybersecurity site acceptance test (CSAT)
- Perform a basic CFAT or CSAT
Course content
A structured approach to industrial cybersecurity design, implementation, and acceptance testing.
01 Introduction to the ICS Cybersecurity Lifecycle
- Assessment phase
- Implementation phase
- Maintenance phase
- Conceptual design process
02 Interpreting Risk Assessment Results
- Cybersecurity requirements specifications
- Developing a conceptual design
- Conceptual design specification
- Detailed design process
03 Safety Development Lifecycle (SDL)
- Types of technology
- Selecting appropriate technology
- Developing a detailed design
- Documenting the design/specification
- Design and implementation examples
04 Firewall Design Example
- Remote access design example
- System hardening design example
- Intrusion detection design example
- Testing
05 Developing Test Plans
- Cybersecurity factory acceptance test (CFAT)
- Cybersecurity site acceptance test (CSAT)
Hands-on laboratories
Apply design and implementation concepts through the following exercises:
- Building the board
- Firewalls
- Defining USB policy and procedure
- Network device hardening
- Remote access
- Using ISA/IEC-62443-3-3 to validate the achieved security level (SL-A)
ISA certification
IC34 is the third course in the ISA/IEC-62443 Cybersecurity Certificate Program. Pass the exam to earn the ISA/IEC-62443 Cybersecurity Design Specialist certificate.
Course registration includes one exam fee. The professional certification exam is available only in English.
Upon successful course completion, a certificate of completion indicates the total number of CEUs earned.
Completing the course and earning the professional certificate are separate: the latter requires passing the exam.
Who should attend?
- Control systems engineers and managers
- System integrators
- IT engineers and managers in industrial facilities
- Plant managers
- Plant safety and risk management personnel
Recommended resources
Standards
- ISA-62443-1-1-2007 — Security for Industrial Automation and Control Systems, Part 1-1: Terminology, Concepts, and Models
- ISA-62443-2-1 (99.02.01)-2009 — Security for Industrial Automation and Control Systems, Part 2-1: Establishing an Industrial Automation and Control Systems Security Program
- ISA-62443-3-2-2020 — Security for Industrial Automation and Control Systems, Part 3-2: Security Risk Assessment for System Design
- ISA-62443-3-3 (99.03.03)-2013 — Security for Industrial Automation and Control Systems, Part 3-3: System Security Requirements and Security Levels
Recommended reading
- ISA Cybersecurity Library
- Industrial Automation and Control System Security Principles, Second Edition, by Ronald L. Krutz, PhD, PE
Language and study materials
Study materials for Spanish- and Portuguese-speaking audiences are provided in English. The professional certification exam is available only in English.
The course page also notes that the ISA/IEC-62443 series is in English and that independent translations of the standards are not approved or authorized by the ISA99 Committee.
The resource editions above are those listed on the course page.
Training scope
ISA training aims to help participants correctly understand and interpret the requirements of the ISA/IEC-62443 series and what needs to be done. Exercises and laboratory products help explain the concepts; the course does not aim to recommend a particular solution or show how to comply with every requirement.
Prepare for your next professional step.
Not sure this course is right for you? Contact our experts for guidance based on your professional objectives and your organization’s needs.
